Security

ClearPass DHCP Profiling

‎07-03-201710:12 AM

Working with a client on profiling endpoints on their wireless network. We setup IP helpers on their router and wanted to confirm we are receiving the DHCP Discover/Request packets. We ran a packet capture on CPPM, but the only DHCP we are receiving are DHCP NAK packets, sourced from their DHCP server, destination was broadcast and they are on the same subnet, so that's why I think we ingested those. It doesn't appear we are receiving the correct DHCP information.

Is there any other ways to check besides the packet capture? I know you can also see the fingerprinting method on the endpoint, but that would be terribly challening, as this has been in production for a long time, just getting this enabled now though.